Sanitised every action function so they shouldn't put the game in the wrong state (e.g. because of re-submitting the same POST data)