compare local and remote host before setting CORS headers