Web service API example uses custom origin header instead of referer