HandleClientCertAndAuth does the following tasks - - if not a TLS connection, use basic auth for access verification - if TLS connection, (perform optional handshake) and use TLS connection state for verification */.