Fix SOP check of TCToken URL

The submitted not the actual TCToken URL must conform to the same origin policy.
Add connection reestablishment to the PAOS channel