resetting challenge/auth on every attempt