remove websocket-server

working on replacing it with socket.io
switch to use ws instead of websocket-server

websocket-server is unpublished so updating to an alternative
account for websocket requests in csrf