Make websocket hijacker more forgiving of missing header