adds separate challenge expiry events in User and handles corresponding server messages