PlayerServer does its own permission checking
fixing authentication events