fix websocket dependency

listing the dependency in dev dependencies clobbers the actual
dependency