wip: digest auth