changed challenges to be public and redirect to login if a flag is submitted.
Merge remote-tracking branch 'origin/master'
settings change