Implementing OAuth challenges.