Clean up credence_controller.update

Less duplicate code, and it processes the POST and redirects to a GET
which means that you can refresh without resending data.
Give correct answer to the user.