socket.io needs a secure: true arg to use https - wss:// isn't enough :(