Understand and fix issues with Phoenix.Socket origin checks

[grossvogel]

It’s a little thing, but one that keeps coming up again and again with new apps, so I thought I’d get down some thoughts about how the origin checks performed by Phoenix to protect websocket connections from cross-site attacks.