re #18 - auth with websocket works
re #18 - lock and unlock with ws