challenge

val challenge: SessionAuthChallenge<T>

to be used if there is no session