added basic security over websockets (need to do was:// support, though).