added authentication check filter for tournament routes, reversed url for logged in / out actions