Added authorization challenge attribute

AltName controller is restricted with authorization attribute. If it
makes it hard for you to do something, revert this commit.