finished server-side validation. moved move-tracking and game status maintenance to server-side: client now only posts an updated board status to create or update