Avoid use of db inside websockethandler
clean up msg parsing
use redis-py instead of tornadoredis for auth

delete key after auth and set key expiration 10 seconds