Normalize AllowOrigins headers and wrap regular expression
Adjusts tests to test for valid subdomains in AllowOrigins
Updates README.md with safer AllowOrigins example
Length check not needed
Dont need new string
Generate and append patterns to new slice value
Moves AllowPatterns from Options to global var allowOriginPatterns
Merge pull request #6 from tomsteele/regex-origin-fix

AllowOrigins allows for bypass