Your code should not be touching open_args and open_kwargs - those
variables are implementation details of the WebSocketHandler. If your
urlspec extracts parameters to be passed in, you should define your
open() override to take those arguments, just like you would with
get() or post() for regular handlers. This is true regardless of
whether you're using @authenticated or not.
Also, @authenticated probably doesn't make sense for websockets, since
you can't redirect the user to a login page over a websocket. You'll
need to put @authenticated on the HTML page that contains the
websocket instead (and then if a websocket connection is attempted
without a valid user just return an error).
-Ben