moved player movement to the server side to prevent map hacking