Add http request headers as a top level object on websocket to make cook...

...ie based auth easier.

[otf: 971 wl: 1 hrs]