Allow the yjs websocket endpoint to support cross-domains authentication

The newly introduced yjs websocket endpoint only supports authentication through cookies.
Consequently, it is not possible to authenticate to the endpoint where cookies are not available (e.g., cross-domains).