lock for heroku
added digest authenticate