Authorise null to access your pod

Had a look at this.  The code for Node Solid Server has in template:  

<h1>Authorize {{app_origin}} to access your Pod?</h1>

Elsewhere app_origin is set:  

app_origin: appOrigin
const appOrigin = appUrl.origin 

I think they simply use the origin of the requesting url.  They should use client_name!!


