move css to seperate file
add playing a card for a hand

- fix websocket to take auth from first message rather than header
- fix mock data to be consistant with DB