WebSocket 1.0, section 7.2 Connections created under an authenticated HTTP session must be closed when the HTTP session ends.