authenticate w/signed request and post new score
add schema
use new array notation
add index controller and exception handler