Send an error block instead of raising an exception (to generate a HTTP response), as WebSockets doesn't support HTTP error responses.
Differentiate unknown user tokens from no token (==> guest).