Add authentication and authorization for WebSocket clients

[joexbayer]

The current WebSocket server allows any client to upgrade a connection. Add support for client authentication and optional authorization mechanisms to restrict access.

This is also needed for the management routes.