misc web ReconCTF

Hacker recently learnt about websockets. He made an application that changes the page's background color using websockets. Here is it.
He even made a function to fetch flags, but the real flag is with the admin user.
Can you get the real flag?

You need to be logged in to submit flag.