unprotect /api/challenge/<slug>
Merge pull request #323 from mvexel/master

unprotect /api/challenge/<slug>