added check for authentication to routes requiring auth
streamlined lobby join into one request to prevent overhead + trying to fix annoying multiple socket.io connections in lobby