Routes: Use @username consistently
Stop using class methods hard wired to @browser
Limit game access to players in the game