Override check_origin from tornado.websocket