3778 - verify app://{guid} urls

This patch lets us use origins of the form `app://{guid}` with the verifier.

This should address some of the problems in Issue #3778