log HttpOrigin denies