added websocket authentication