More websocket stuff. Nearly works
Remove auth token on query string

Use cookie request header instead of query string
Also move withLeft and fromMaybe into a separate module.