More validation fixed, added CANLEAD to trusted LTI origins