I'm going to try and support server-side events in Ekster by sending the access token in the GET request. There should be a better way, but I want to make sure this is a useful feature, before making it really secure. #famouslastwords