Ably cross-origin iframe