are you using session authentication? when you say "nothing happens" do you mean you just keep getting challenged?