allow restricting connections to certain origins