Set CORS origin header to incoming request origin if allowed
Merge pull request #523 from walmartlabs/user/eran

Set CORS origin header to incoming request origin if allowed