Origin
Otherwise this gives lots of unnecessary warnings: W srv operator(): (CORS) skip non-localhost origin: