Yeah, that thing is a mess; would be better to AUTH on the HTTP request

I have a hack on my NIP-29 relay where if you send a limit: 1 REQ with nothing else it will ask you to AUTH