New REST controller for challenge operations.

Change-Id: I89ea3801e18fa24417b0a3f6096d80f1f8372e0c