added auth
this should work for production and local now
added ability to kick people from the room, and a hack to keep them from trying anything funny while still "there"
convention convention