Cleaning. Now: Fix bug where handle_restricted does not send WWW-Authenticate header. I try to merge this with handle_authorized and/or handle_unauthorized.
Fixed authentication_info. Recall: It must not be sent unless the authentication was successful. Moved put_string statements in process_authentication in debug clauses. TODO: testing, revising contracts.