hmm, how do we verify supertoken sessions over websockets? 🤔 which cookie(s) (or token?) should we pass and what method should we use in the node sdk?