updated with auth-digest enabled.