Validator should accept FirefoxOS app:// origins

Issue #2965

Tested using the navigator.mozId part of the b2g UI tests app to check regular assertion, allow unverified, and allow unverified + force issuer.

@ozten can I get your blessing on this one?  Did I miss anything?