Added a guard so that only a user with the host role can start and reset the clock.
Backed out my changes to implement host controls, because the socket id can be different from request to request.  I was expecting it to be the same socket id for all the requests from the same client.

I think I am going to have to use a client side generated value for the host key and pass it around as a token on the requests.