Correct declineChallenge API call to use DELETE