add socket.io authorization