Stash this muck
Setup CORS middleware and make null session to ignore CRSF protection
Create new game record with POST