Add md5 (for HTTP Digest Auth)

should we also let the user disable this, especially if the users disables http?