fixed problem when there's not HTTP_ORIGIN in META