Added a restrict_origin decorator to prevent cross-site ws hijacks