Validate against malicious / corrupt / buggy input

[Happy0]

At the moment the low level stuff that builds the games from move messages trusts clients to not try to break things :P.

Something should be added to make sure that the user's client agrees that the move another client made is legal and that the origin / destination square match up with the FEN for the move / the person who claimed to win the game did so, etc.