Forgot to bcrypt flag in updateChallenge