Update index.js

allow mods to start tours too
change all:  if (!user.can(*)) to if (!user.can('ban', null, room))