fixed origin check: http://stackoverflow.com/questions/19708330/serving-a-websocket-in-go