added socketio authorization (untested)