updated server to actually use move and attack validation