Check cross site request token for WebSocket

http://www.christian-schneider.net/CrossSiteWebSocketHijacking.html
Merge pull request #1822 from hypothesis/websocket-csrf

Check cross site request token for WebSocket