let User servlet detect static admin with (newer) md5 encoded pwd

(complete a old todo)

htroot/User.java

@@ -91,7 +91,6 @@ public class User{
         }else if(sb.verifyAuthentication(requestHeader)){
             prop.put("logged-in", "2");
         //identified via form-login
-        //TODO: this does not work for a static admin, yet.
         } else if (post != null && post.containsKey("username") && post.containsKey("password")) {
         	if (post.containsKey("returnto"))
         		prop.putHTML("logged-in_returnto", post.get("returnto"));
@@ -100,11 +99,19 @@ public class User{
             prop.putHTML("logged-in_username", username);
 
             entry = sb.userDB.passwordAuth(username, password);
-            final boolean staticAdmin = sb.getConfig(SwitchboardConstants.ADMIN_ACCOUNT_B64MD5, "").equals(
-                    Digest.encodeMD5Hex(
-                            Base64Order.standardCoder.encodeString(username + ":" + password)
-                    )
-            );
+            boolean staticAdmin = false;
+            if (entry == null) {
+                // check for old style admin account
+                staticAdmin = sb.getConfig(SwitchboardConstants.ADMIN_ACCOUNT_B64MD5, "").equals(
+                        Digest.encodeMD5Hex(Base64Order.standardCoder.encodeString(username + ":" + password)));
+                if (!staticAdmin) {
+                    // check for DIGEST authentication admin account
+                    final String realm = sb.getConfig(SwitchboardConstants.ADMIN_REALM, "YaCy");
+                    staticAdmin = sb.getConfig(SwitchboardConstants.ADMIN_ACCOUNT_B64MD5, "").equals(
+                            "MD5:" + Digest.encodeMD5Hex(username + ":" + realm + ":" + password));
+                }
+            }
+
             String cookie="";
             if(entry != null)
                 //set a random token in a cookie