mod_base: More careful websocket handshake.

When you have a busy webserver missing an occasional header isn't that
exceptional.