server-authenticated motion, working... even with players