have there been any advances in authentication, content negotiation, or structured response status generation?

good evening; neither a read through the pages on lists.common-lisp.net, nor a search through gmane's offering yielded anything substantive on facilities to be combined with hunchentoot for - authentication : alternatively basic, token, and session based? - content negotiation : resolving request headers against declared availability to yield effective content type, encoding, etc? - structured response status generation : condition handler -> response status control structures? when these operations cannot be delegated to a mediating server, is the common practice to code them form scratch? best regards, from berlin,