fix: only authenticated users can access game controller