I've had the same problem with  multiple clients and it's very frustrating. Once the authentication fails, then it does no good to void and resend. After that no matter how many times the clients retry, it fails. Seems like there is a snafu somewhere that needs to be addressed. If it's another level of security, then we should be made aware of what it is so we can inform out clients.