granted
session
validate
challenge protection