http: Allow WebSocket requests from other hosts

This makes Tornado 4.0 behavior consistent with previous Tornado versions.

Fixes #788