UK: authenticate subission with digest