split digest authentication on ServeHTTP