added server-side song verification