Allow multiple authentication response types.

In preparation for a stacked system of authentication.