Verify HTTP handshake response

Make sure Sec-WebSocket-Accept header is what it should be.