Strip internal notes out of public matches route
Prevent privateValue and resetHash from being leaked through AJAX
Merge pull request #177 from FCStrike/dev

Sanitize AJAX requests on public routes