challenge request features revamp: added authorization check.
added corresponding test cases.