Unknown upgrades now respond with a 404.
Upgrade_websocket only calls `set_upgraded()` once the websocket connection has been established.
docs: internal-workings.md: Upgrading