HTTP Signatures instructions do not include requirement for digest

[sventiffe]

The documentation under security describes that headers (request-target), host,date) are required to be used for signing HTTP requests. However, digest seems also to be required (see also comment here.

Documentation should be updated to reflect that. Assuming this is correct, there might be other documentation pages like this blog post that require an update too.