Allow the origin check to be disabled by not specifying a whitelist.
Cut version 0.4.