Added csrf code into game2, attached game by default to /test/test page,  fixed error in session code