add authentication process to websocket controller