add auth for player/tournament put