websocket messages are now handled only after auth is done