How to deal with Access-challenge response?