Sample application that demonstrate issue with missing origin headers