move exploit protection to new file

Moves Auth Token stuff to separate file because it doesn't really need to be in `itemcontrol.lua`

Helps me keep track of it better too

Also added a "cooldown" to workaround people's multicharacter scripts claiming the players loaded more than once and breaking it

starter.lua

@@ -177,7 +177,7 @@ for _, v in pairs({ -- This is a specific load order
     'effects.lua',
 
     --'warmenu.lua',
-
+    '_authToken.lua',
     -- Do version check last
     '_scriptversioncheck.lua'
 }) do