Allow request type specification in ajax requests

Also include csrf token in POST requests, and actually pass
data in the request
Add user login functionality

If the user successfully logs in, they receive a token from the server.
They send this token when starting their game, which the go
server looks up to determine their id for secure communication with
the game server