Update allowed-origins