wip: digest authentication