debugged JS (coffee - we should really get rid of it!), plus models and challenge API endpoints