Comment 1 for bug 488918

I am try to write some code ^))

And has collision as I wrote before.
How to capture auth_token from request in twisted authentification?
Because if we send BasicAuth header to server -- twisted auth must check it, another side checker will be rejected request.

Another problem is:
if we inherit from tw.web.server.Site to implement sessionstate issue, we must change tw.web.server.request.getSession method because it handle session by coockie.
But if we do it -- we can use standart tw.web.server.Session class.

Please clarify me: We create new QueryAuthProtocol class, who send login request on first call or not?