Added AJAX CSRF support for game. Stubbed out the create endpoint.