title: User authentication in tornado websocket application
body: <p>Now, i improve my tornado skills and have a question about user auth.</p>
  
  <p>And my solution is create secure token on first page and next send it with other data, from javascript to tornado server where do checking and auth user. </p>
  
  <p>i think about cookie but i don't know how i can read cookies in    <code>WebSocketHandler.on_message</code></p>
  
  <p>what you think ? and where i wrong ? Thanks</p>