proper websocket auth in place and add central place for websocket management