Right now player 1 can still move player 2's pieces. Make sure that player 1 can only move their pieces. This should be done by making sure that the email matches the user who can move.