import from HEAD:

	Append first 2 username chars to challenge.  The previous routine
	created a fixed challenge, which led to a fixed response, which
	was all 0's!  Thanks to David Mitchell for spotting this.