Fixes OriginFilter to allow just Authorization in headers. [Fixes #60042338]