Better websocket authentication