add and pass authorization and challenge