upgrade tornado to 4.0.2
import backports.ssl_match_hostname 3.4.0.2
override to enable support for allowing alternate origins

To accept all cross-origin traffic (which was the default prior to Tornado 4.0), simply override this method to always return true.