Allow all *.zooniverse.org domains in origin in staging