Add secure.jid.pl to whitelist for Rack::Protection::HttpOrigin
Use messages from messages.rb