protected /protected/* user DIGEST UserDatabase user