server: don't load socket.io through XHR, use <script> instead; set websocket as default transport for client