only authenticated users can create a new challenge