sess.sendResponse(response);
      }
      while (response != null)
      {
        String clientInput = reader.readLine();
        if (clientInput.trim().equals(AUTH_CANCEL_COMMAND))
        {
          // RFC 2554 explicitly states this:
          sess.sendResponse("501 Authentication canceled by client.");
          return;