secure token request challenge
protection
computing
granted
check
session
browser
protection
check
confirming