"Origin" is an HTTP header, not a request parameter

As noted in https://github.com/uwdata/termite-visualizations/issues/5, the Termite visualization server currently cannot connect to the Termite data server because CORS has not been properly implemented. This fixes that.