code: private LifeForm tricorderScan(HttpServletRequest req) {
  		// For simplicity's sake, we'll say Humans use FQDNs, not IPs.
  		
  		String auth = req.getParameter("Authentication");
  		if(auth!=null) {
  			if("BasicAuth".equals(auth)) {
  				return LifeForm.SBLF;
  			}
  		}
  		// Current guess that only Browsers bother to set "Agent" codes that identify the kind of browser they are.
  		// If mechanical frameworks are found that populate this, then more advanced analysis may be required
  		//  1/22/2013
  		String agent = req.getHeader("User-Agent");
  		if(agent!=null && agent.startsWith("Mozilla")) // covers I.E./Firefox/Safari/probably any other "advanced" Browser see http://en.wikipedia.org/wiki/User_agent
  			return LifeForm.CBLF;                      
  		return LifeForm.SBLF;							// notably skips "curl","wget", (which is desired behavior.  We don't want to try CSP, etc on these)
  	}
docs: /*
  Since this is internal, we use a little Star Trek humor to indicate looking in the HTTP Request to see if we can determine what kind
  of "LifeForm" reading we can determine, i.e. is there a Human (CarbonBasedLifeForm) behind a browser, or is it mechanical
  id (SiliconBasedLifeForm)?  This makes a difference in some Authentication, i.e CSP, which doesn't work well for SBLFs