Sockjs security

- Match outbound rules before registering event handler with event bus
- Add debug flag so bad clients don't force a bunch of string concats on server
- Fix sockjs message matching to only match when a match has been defined and json object is in message. Also supports deep matching (embedded objects). Arrays not supported.