fixed new_team security with session vars and updated tournament so you can add teams