challenges needs login and redirects