add captcha and auth_challenge raw tests, merging with auth_challenge branch