I will go ahead and move the origin header parsing into `check_origin`.