* do not handle authorization from internal sources * do not remove authorization from internal sources * when connecting to external from internal, a 401/407 may be returned and we relay that info back to media server, which will issue a new request with authorization, and we need to pass that info to externalmaster