No payload is not an authentic player

[blunket]

This fixes #410. Unless that issue is way more complex than I thought.

Sorry I been gone for a while. Still want to help a lot with this repo. 😄

Checklist

• Use a separate branch in your local repo (not master).
• Test coverage is 100% (or you have a story for why it's ok).

[nicolodavis]

Welcome back @blunket!

This PR does indeed fix the case where a player tries to force their way through in an authenticated game by merely removing the payload.

However, I think we might also be inadvertently disallowing moves when the game doesn't require authentication in the first place.

[blunket]

Thanks for the review @nicolodavis, didn't think about that. Hopefully this update fixes that issue. I simply moved the code down a few lines in both files. haha

I didn't squash, I figured you'd squash if you wanted to! Let me know if it still needs fixing.

[nicolodavis]

Perfect. Thanks a lot Andrew!