Changes to action.php for challenge-response authentication