Make origin domain canonical before allowed check.