* Document the C::A::C::Password stuff properly * Work out what options inherited from C::A::C::Password make sense, and test / document them + make apply to digest as appropriate. . Port work's apps. . Document how to find the credential module, so that you can call authorization_required_response if you want to. . Document, and test overriding the realm's realm->name method. . Add deprecation notice to old module. . Test $self->_config->{authorization_required_message} + authorization_required_message = undef does not stamp on body. . Split auth headers / do auth methods again, and make authenticate call each in turn. . Document / test 'algorithm' config. . Test and document use_uri_for config