authenticating web sockets