Verify server's Sec-WebSocket-Accept

Saw a FIXME for this.