fix websocket auth