So I haven't looked at the code at all, but I'm just wondering how you got Phaser to work securely for multiplayer.
Since Phaser controls physics/location on the client-side, isn't it possible for someone to hack their client to run fast or teleport in the game?