battle and act controllers ensure that current_user is operator