Move the $lords and $eth transfer outside of the Controller session

[loothero]

For security reasons, I don't think that sessions should have access to $lords or $eth. People starting/paying for a game should do so via an explicit signature.

The same applies for sending adventurers too - this should be an explicit signature.