upgrade cometd to address issue with sec-websocket-accept headers not being set