@User for socket connections, you need to do session verification only when creating a socket connection. After the connection is established, you don't need to rely on session verification and can simply trust the socked connection.