add X-Origin to GET requests, so isso.dispatch works on a single host