quality of userbar js improved. also now checking origin to prevent postmessage listener trying to act on messages from other domains e.g vimeo