[Issue #20] Authentication response may be custom one - if user authentication requires more details as a subsequent step