fixed: reset challenge on success login