Correctly verify hostname in websocket request