DELETE action now works as intended
POST now works as intended
Added more filter methods, cleaned up controller
Added field to help tie session to player
PUT action now works as intended
code clean-up, tightened up param filtering