Allow location.origin for postMessage, send client_id to zamboni

whoops