Use origin for redirect realm so domain prefix is included.