fixes case where rack reports origin header as HTTP_ORIGIN
0.1.4