Added explanation of credentials and challenge-response