Add cookie check over websocket, remove webshim