race condition in move code

user could attempt multiple moves simultaneously
but it would only cost a single move

we use pesimistic locking to stop this

-> not sure how to test this in rspec :(