Recognise auth forms named "challenge" as token requests

This was found in the wild on an AnyConnect instance which is hooked up to a Microsoft 2FA platform. Closes #4 (closed).