404 if challenge id not found or invalid