don't send origin when cors not being used (arthur was right)

Change-Id: Ia0e84349864cda38d9d65c8c39082b31fbbd99a0
Merge "don't send origin when cors not being used (arthur was right)"