Fix returning Origin header if cors.allowOrigin not provided
Update to be PSR-2 compliant