fixed: WebSocket onAuthorization