Correct format for step 5 

5. authServer returns `"Username:Session"`