Fixed improper usage of the Allow-Origin header. Only one origin is allowed.