uses concat instead of looping over new challenges in ChallengeGraph
moves /request/challenges into ConnectionOpened handler in ChallengeGraph