WIP socket.io auth