tokenverify
if (tokenverify(username, challenge, pp) == 0) {
extern int tokenverify(char *, char *, char *);