Added permission to be able to challenge /bc

Added permission for auths to be able to challenge users in /bc