Auth0 Lock doesn't consider a registered Web Origin + pathname to be a valid Web Origin