allow websocket connections only from whitelisted IPs