Fix ACR generation on authentication challenges and failures