made challonge calls serverside (no more cors)
add ability to have secret api key serverside
Clean up + missing challongecalls to server