AuthenticateResponse now holds keyHandle instead of challenge. Added more negative system tests.