As this is a test bench, we should allow the user to alter the InResponseTo. Or to add an InResponseTo to mimic a reply to an AuthnRequest. I think it should be an ordinary input.