fix server challenge length check