Add API endpoints for viewing challenges.
Can authenticate via AUTH headers.