websocket state saved in session object; socket handling session-specific.