Allowing auth to challenge users in /bc

Added auth check so they can challenge users in /bc.