added missing authentication challenge block