div#innerTarget
  form(hx-post=links.challenge_form hx-select="#innerTarget" hx-swap="outerHTML")
    fieldset
      input(type="hidden" name="state" value=state)
      input(type="text" name="username" placeholder="Username" value=username readonly)
      input(type="password" name="password" placeholder="Password")
      input(type="submit" name="submit" value="Submit")
  if links.select_device
    a(hx-get=links.select_device hx-select="#innerTarget" hx-swap="outerHTML" href='#') Use a different device