SAME-ORIGIN should be SAMEORIGIN