FIXME: server returns Sec-WebSocket-Accept