Update submissions api, challenge details api

1. Return empty submission array when the challenge is not finished or the caller is not admin for challenge details api.

2. Return error when challenge is not finished or the caller is not admin for submissions api.