Added validation of access key domain (from CORS Origin header)