added check for Sec-WebSocket-Accept in validation