authentification and websockets