make sure the websocket handshake is coming from the right source