What are you going to send from authenticate? It should be simple, password correct or password wrong. Everything else should be in post auth, authorize or post proxy even alan -- Message may be brief as it has been sent from my mobile