Check cross site request token for WebSocket

http://www.christian-schneider.net/CrossSiteWebSocketHijacking.html