A YRoom can be created from an un-authenticated user.

[Zsailer]

I noticed while investigating #290 that an unauthenticated user can trigger the creation of a collaborative document, even they are blocked from connecting to it after it is created.

I believe the issue is that authentication happens in the parent class's prepare(...) method in the YDocWebSocketHandler, which is called after the room is created.

I think we need to move this call earlier in this method, probably call it first before any other logic.

[krassowski]

@Zsailer was this resolved by #289? It looks like it was but it seems no test was added so probably fine to keep this issue but rename to "add a test for ..."