Add javascript origin to simple-auth endpoints