All authorization methods in one place
User has many challenges