show create challenge form only for authorized users