HttpHeader problems

[KrippZ]

Hello I'm tryin to develope my own webserver and I need some help with
the HTTP aspect. Im trying to create a webserver with session handeling
and for this I use the Set-Cookie header wiich I can manipulate as I
please but I also need to use the "Authorization http header" and
"WWW-Authenticate header".

My problem is the following:
I do a login with a www-authenticate challande and get the
Authorization http header response but I need to know how I send a
server response that clears the clients Authorization http header, so I
can get the login window to pop up again.

which headers and status codes do I need to use for the following:
1.Request: GET / HTTP 1.1
2.Response: 401 Unauthorized (WWW-Authenticate basic realm="somerealm")
3. Request: GET / (with Authorization: =SOMEVALUE)
---- User is logged in and does tasks
-----inacctivity for x minutes == sesssoin timeout
Request: any form of request
Response: ?

Cheers!
//KrippZ

 

[KrippZ]

When the session has expired the value under Authorization is still in
the subsequent calls to the webserver, even after the server has sent a
403 forbidden, how do I clear the clients Authorization header or is
theis impossible from the server side?