update_challenge should be using PUT not POST