have there been any advances in authentication, content negotiation, or structured response status generation?

good evening;

neither a read through the pages on lists.common-lisp.net, nor a search through gmane's offering yielded anything substantive on facilities to be combined with hunchentoot for

- authentication : alternatively basic, token, and session based? - content negotiation : resolving request headers against declared availability to yield effective content type, encoding, etc? - structured response status generation : condition handler -> response status control structures?

when these operations cannot be delegated to a mediating server, is the common practice to code them form scratch?

best regards, from berlin,