Only allow websocket transport in gunicorn handler by default

Avoid broken XHR and leaking sessions by only allowing websocket transport.