challenge_and_response認証