better websocket security