Security code was checking agains the special Jockey URL; now checks agains the real URL of the browser.