HTTP response client challenge passing