added authorisation challenges types