Make isSameOrigin match port, but generally allow non-http origins
0.10.3