authentication and socket.io