added check_origin to fix bug

this fixes the bug so that using websocket works correctly