Ek Add some validations for Match

* Only a challenger or defender can report a winner
* A winner can only be reported once
* Links to report a winner are gone if not permitted
if the winner is submitted? should the method be called winner_submitted? I feel like submitted makes sense.