REP-819 Keystone V3 Filter

The mess that is Keystone v3! Comment on _everything_ so we can get this fixed up. =)
If we are in delegated mode (that is we are passing all requests to origin service) then we should *not* replace WWW-Authenticate.