allow origins and test them