Verify postMessage origin before firing updateRender(), closes #82