[fix] Allow Origin: null as valid header. Fixes #5 #2