implement websocket client authentication by api key