Refactor the bombsForUser method into another module ready for adding an API for the ajax creation of bombs