change websocket api

change api path
set to not require cookie.