The check for Sec-WebSocket-Accept should be case-insensative