socket.io api checks owner