Check origin urls start with the user's provider_url
To prevent any user from creating any origin url.