Once we offer support for BASIC/DIGEST, on our client SDKS (and on the server via PL), we should state in this document:
http://aerogear.org/docs/specs/aerogear-rest-api/
that the "/login" and "/logout" are not compilant w/ BASIC/DIGEST, since they perform auth against a (PL) Filter