when was `method='basic'` vs `method='digest'` added?  By having a pluggable `RequestAuthenticator`, there is no need for a method parameter at all - any authentication algorithm can be plugged in (i.e. scales better)