The value of module::ExternalAuthentication/algorithms wasn't taken into account while generating the challenge header.
