Test for Origin header
CORS moved to nginx
User details controller