I fixed these two problems by setting up "AllowCorsFrom": "*"
thanks to this post: Failed to upgrade websocket connection - #8 by robert9780
However, it’s not recommended in production; if somebody has a better solution, please let me know. Thanks!
