finishing up the challenge admin api first pass