move digest to model controller and include user id and flash
make cache public, no cache on GET