Add origin whitelist to prevent request being blocked by rack.