add login check for admin center, and register token for second challenge