add challenge param to GET /duel/user