More auth stuff. Web-socket still takes requests even if unauthed.