websockets for quiz sessions

added very beginning of websockets. 

need to hash out what needs to be stored in each "session" now that we don't have to route each request and have persistent connections.

change will be independent of API and front end and deprecate most of session.go and it's related routes. Mostly clients affected.