fixed: authorization in websocket