Change domain permissions for postMessage

This changes the formstack javascript postmessage to trigger on any domain for the time being so that we can test the composer integration as the code environment is no longer active.

I've talked this over with @rtyley and we have agreed that this small change is ok to merge to prod for testing purposes.

Nothing security sensitive is revealed here so it should be fine for now.