Issues for CRAM (Challenge-Response Authentication Mechanism)