Chrome/safari adds the Origin header in same-origin post/put/delete
requests, causes api requests to fail. Origin is the proxy anyway not
the browser.
Merge pull request #824 from fmoloney/RemoveOriginHeader

Chrome/safari adds the Origin header in same-origin post/put/delete