* response_digest_a2 needs to be tested.
* An Authentication-Info#validate may need to be added as well.
* Work around IE query parameters bug
* Strict directives checking
* AuthorizationInfo should only return rspauth and nonce and the like if :qop == 'auth-int'
* Expire nonce
* Address security considerations
* Support for proxies
