add callback function to sign the challenge for client verify