Add a test case for credentials/challenges