Which SIP authentication mechanism involves sending a challenge-response pair to verify user credentials?