implement taking turns on which controller can update state

[gulachek]

games need to have a concept of whose turn it is. there needs to be a sense of which user/session is connected to each websocket connection or request