add a much slimmed-down websocket (removed environ dependency and current_app behaviors)
add utf8 validator, more-or-less untouched
more websocket middleware/endpoint progress
something subtle going on, which means we're close here