Add basic user auth and server-side move checks
Add client-side team logic