Added the unembed method to vanilla.embed.js.
Always check the sso string if it has been provided.