The only time we decline a web socket is due to mismatched origin headers, and we throw a forbidden in that case.

We do also log, but only debug-level. We could make that info level though? I was not sure because if a malicious user is trying to access the site cross-origin you could get spam in the logs with blocking request over and over. Could be solved by adding rate limiting though.

But on the other hand, if there are permanent connection problems like this, it seems reasonable to use debug level to figure them out.