refacto: Replaced useless DB queries by websocket calls + patching WS auth-token leak

server/app.js

@@ -11,7 +11,18 @@ const publicDir = path.join(__dirname, "..", "public");
 const app = express();
 app.use(cors({ origin: process.env.CORS_ORIGIN ?? "*" }));
 app.use(express.json());
-app.use(express.static(publicDir));
+app.use(express.static(publicDir, {
+  etag: false,
+  lastModified: false,
+  setHeaders: (res) => {
+    res.set("Cache-Control", "no-store");
+  },
+}));
+
+app.use("/api", (_req, res, next) => {
+  res.set("Cache-Control", "no-store");
+  next();
+});
 
 app.use("/api/auth", authRouter);
 app.use("/api", gameRouter);