Added server side verification for attackCooldown