WebSocket proxy endpoint - use /ws/{token}