sockets now use session-based auth