Send random cnonce for HTTP Digest requests

My real problem is that passport-http interprets cnonce="" as an undefined cnonce.

From my understanding of cnonce, it is best to send a random cnonce with every request to make it harder to use a rainbow-table based attack against the hash.

So, I offer this patch in the hopes of solving my original problem, while also making request's digest implementation more complete.

Cheers,
William