@jamiem RE converse.js I'm not seeing the same error (mine tries to log in and then spins forever), but it doesn't look like https://mayfirst.org/.well-known/host-meta is present. Since the address is "mayfirst.org" but the actual connection spot is "im.mayfirst.org" and web clients can't lookup SRV records, I think you'd need a host-meta with the CORS header set to allow the converse.js domain to access it.