diff --git a/users/auth/splatfestival/index.html b/users/auth/splatfestival/index.html
index 0bd5df7..07aa727 100644
--- a/users/auth/splatfestival/index.html
+++ b/users/auth/splatfestival/index.html
@@ -41,6 +41,7 @@
 <div class="hb-page">
 <form id="auth-form" action="/api/v2/sso/spfn/generate_token" method="post">
 <input name="lang" type="hidden" value="en-US"/>
+<input id="frontend_origin" name="frontend_origin" type="hidden" value=""/>
 <div class="hb-container hb-l-inside">
 <h2>Sign In</h2>
 <p>Please sign in with a Splatfestival Network ID to proceed.</p>
@@ -80,6 +81,8 @@
 <script>
 $(document).ready(function () {
     var form = $("#auth-form");
+    //hotfix cuz fastapi is strict
+    $("#frontend_origin").val(window.location.origin);
     var path = form.attr("action");
     form.attr("action", CONFIG.API_BASE_URL + path);
     $("form").submit(function() {