remove www from iframe origin