read_websocket() mask_len bugfix & mask extraction

mask_len is now taken into account when checking body_len.
The 32-bit mask is also extracted (but not used yet).