move max players checker to client_putinserver

didn't seem to function correctly when checked at client_authorized