Send/require a cookie header on digest-auth

Also fix an import.