Created more policies "isOwnerOfAccount" and "isOwnerOfLobby".
Set correct policies for each controller's actions.
Remove boilerplate comments.