Update index.html

removed targetOrigin, assumption is CNID object is available in the global scope for the page to receive postmessages.