add allow_inline_pairing kwarg to authenticate iframe