-      is_authority_match);
+      !!application);
seems here only check the application's existence?
For multiple app support, we could compare the request's original process ID and the Application(with the application_id) renderer process ID.