Allow location.origin for postMessage, send client_id to zamboni

Fixes #4
v1.0.4
local fxa everywhere (bug 1098624)