servlet: accept 'scenario' as alias of 'deal' in some places
servlet: accept game metadata or movelog
servlet: game ids are now strings, not integers
publish-game: choose a game secret and send that with the initial game metadata
publish-game servlet: check authorization by comparing shared secret