Add working test for private and non-private windows open simultaneously
Remove unused import
Don't policyCheck if host is undefined

host is omitted when we don't care about doing a policy check for
the origin before blocking it. Ex: testing with SJS scripts served
off localhost.