Verify is now in JWT body
Fix JWT unset
Challenge is now automatically set by the API instead