Working on HTTP authentication there are a couple of opportunities for some clean up within the Callbacks and the handler.

1 - Make RealmUnavailableException extend IOException
2 - Fix up the password / credential verification strategy.