Use a lower-case hex-encoding for CRAM-MD5

This *may* fix the CRAM-MD5 auth bug discovered in issue #34