HTTP Protocol Header; WWW-Authenticate:, Authorize: and Location: !

I've written a HTTP client which generates its own
HTTP-headers.  Now I'm trying to get information from a
site which requires Username and Password.
When contacting the site in "normal manner", I get the
reply:
HTTP/1.1 401 Authorization Required
Date: Mon, 01 Dec 1997 17:33:15 GMT
Server: Apache/1.2.4
WWW-Authenticate: Basic realm="TDN Ajour"
Connection: close
Content-Type: text/html


... so I send back the following reply:
GET http://www.somehost.com/protected-area/ HTTP/1.0
Connection: Keep-Alive
User-Agent: Mozilla/4.03 [en] (Win95; I)
Authorization: Basic NXjhiehfiiIHFIihfiHIDhdihfIHDIH  
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Accept-Language: en
Accept-Charset: iso-8859-1,*,utf-8
Content-Type: text/html

... so far so good.  I know that the User:pass is encoded
correctly (PS: the above is just bogus to illustrate),
because I get a new 401 error if I send an invalid username.

But when doing this (sending the correct user:pass),
I get a reply indicating a location change:
HTTP/1.1 302 Moved Temporarily
Date: Mon, 01 Dec 1997 17:34:30 GMT
Server: Apache/1.2.4
Location: http://www.somehost.com/protected/bin2/setuid.pl
Connection: close
Content-Type: text/html

Now I don't know what to do!!!

I've tried sending the same request to the new location URL, that is:
GET http://www.somehost.com/protected/bin2/setuid.pl HTTP/1.0
Connection: Keep-Alive
User-Agent: Mozilla/4.03 [en] (Win95; I)
Authorization: Basic NXjhiehfiiIHFIihfiHIDhdihfIHDIH  
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Accept-Language: en
Accept-Charset: iso-8859-1,*,utf-8
Content-Type: text/html

...but get get the reply:
HTTP/1.1 302 Moved Temporarily
Date: Mon, 01 Dec 1997 17:34:30 GMT
Server: Apache/1.2.4
Location: http://www.somehost.com/protected/bin2/error.pl
Connection: close
Content-Type: text/html

When contacting http://www.somehost.com/protected/bin2/error.pl
I get a stupid errormessage back....

(PS: It's not as simple as - like - I've forgotten a CRLF
on the end of each line in the HTTP request, but probably
just some info which I've forgotten to add in the
"relocated" request...)

So - should a "relocation" request contain some additional information
to indicate the document which was *originally* requested?
Or have I missed something else here....


(Additional/summary info which might be helpful...:
 From what I can gather, the server closes down the connection after
 sending back a 401 error.
 I've tried to reconnect to the server using the very socket which
 I was using when I got the 401 error, but that wont work.
 (connect() fails!!?)
 What I'm doing to solve this is:
    1. Issuing a closesocket() on the socket.
    2. Creates a new socket
    3. connects to ther site again.
    4. Sends the same request as before with additional
       Authrize: info...
    5. Gets a 302 errer (temporarily moved)
    6. Step 1-5 at the new location...
    7. Gets a new 302 error a.s.o...    )


This is really messing me up bigtime! :)

So... I'm *really* looking forward to some help on this one!!!!!!

    Regards,
            Eljar Ness