make sure authenticated users don't get to spectate their own games