basic websockets auth working