fixed: no session id in challenge.
#36 fixed: construct delete chellange while auth.