Use get instead of post, no need for csrf protection, add check for empty request
Player search exception fix
Convert season stats to be ajax for better UX