Fix for chrome (tested) and safari(not tested) apparently they include
"Origin" header in every request