bugfix: check socket request session id when authentication is enabled