Client: add header "Origin: http://example.com/"