Use the direct noVNC endpoint on port 6084.