check Sec-WebSocket-Accept header