1. you are still sending the username and password in the clear, you need to delete lines 7 and 8

2. try http::data

3. There are *NO* XML attributes in the response -- see the bottom half of http://www.livejournal.com/doc/server/ljp.csp.xml-rpc.getchallenge.html for what the response looks like.