removed unnecessary .then() calls
spec descriptions improved
added admin section challenge spec
extracted input elements
added SQLI login tests
removed functionality tests

- all covered by unit tests
- only challenges will be e2e tested