Security - Checking header Origin of WS connections