Set session id cookie's path to '/'. Now the id is passed in websocket handshake as well.
Check if connecting websocket client is logged in.
- Route websocket handshake request through normal http handlers.
- In handler check if request's cookie has valid, logged in, session id. If yes, upgrade connection to WS protocol, if not return 403 forbidden.