added test for ChangePasswordController
removed unused vars
added test for ChallengeController