CheckOrigin to be somewhat restrictive

[emgrasmeder]

Right now we're implementing Gorilla/Websocket's example of allowing connections from any origin, like:

var upgrader = websocket.Upgrader{
    CheckOrigin: func(r *http.Request) bool { return true },
}

and maybe someday we want this to be a little less relaxed.