password digest & reference url