[tracking] QSP-2 Challenge lacking entropy on registration and authentication ceremonies

[tt0mmy]

• use random challenge for registration and authentication ceremonies
• introduce nonce into the request payload