client with another ip than one from player url can't withdraw

[seblm]

During a big session, one have withdraw the best team - maybe by mistake or not.

This pull request hide withdraw link to everyone else than player. You are a player if it's url contains your browser ip.