interceptors for websocket auth