Removing handshake authorization hook since there are still some unknowns about how best to tie session into socket,,, e.g. which id wins?  session-id or sessionID...?