allow for a dynamic list of allowable origin hosts
Merge pull request #25 from Connexions/multi-origin

allow for a dynamic list of allowable origin hosts