do not abort with a 400 bad request when the challenge exists

Instead, we should be updating the challenge. to be implemented. for
now, return empty message.