REFACTORING: renamed AuthRequest to AuthDirective, since doesn't really exhibit request semantics