typo
Extended update info
The HTTP_ORIGIN header is not reliably set