authenticate websocket