Review and changes from Jocelyn Fiat

could be just 
same_string_general

I noticed that using /login/basic and /login/digest was not working, the browser were not sending the Autorization header for /public for instance. So I don't know if the http auth is expecting to apply to only the parent folder (and its subfolders), and that  /login/digest ... break the behavior. So let's keep for now  /login to be applied on /login/../*

If you have information on that, please share.