authenticate on creating user; text challenges at date time only if date accepted