As with non-API requests, when the adapter finishes, it returns
AUTHN_STATUS.SUCCESS or AUTHN_STATUS.FAILURE from
lookupAuthN().
If the adapter has not yet finished and has written something to the response, it should
return AUTHN_STATUS.IN_PROGRESS.