update methods for leaderboard score endpoints
abstract out db logic from game API endpoints (fixes #216), remove PUTs