Add csrf to chat room, still not prevent anonymous from direct connection to socket