update methods for leaderboard score endpoints
abstract out db logic from game API endpoints, remove PUTs (fixes #216)