Add localhost as valid origin for a CORS call

This fixes https://github.com/Netflix/security_monkey/issues/62