Should use origin not host header