Remove checking Origin header.

RFC requires Origin header for browser client.
Non browser client may be omit Origin header.