Add SessionsHelper to ApplicationController.  Make sure session[:referer] is cleared on friendly forward.  Dont require login to see ChallengesController#show