Added quotes around allow origin header to allow for wildcard