add controller method and routes and form to call game.move_robber?