Make Websocket scheme configurable, secure by default