FxA web flow (bug 1033694)

Assuming an origin is set it shouldn't it be validated here?