fix orders
fix websockets auth