[Http] Fixed bug in Origin check - browser may pass http://