client and server side challenge, client side reject challenge
server side of challenge rejections