security improvements = patching up setting prediction after a game has
ended + removing sending the user id with the form (request being used
instead)