func (c *Challenge) Save(w http.ResponseWriter, r *http.Request) error {
    session, err := c.idp.config.ChallengeStore.New(r, SessionCookieName)
    if err != nil {
        return err
    }