adding digest package as dependancy

We're adding sha256 support to pdf.js core, so pdf.js should depend on digest package.