Adds the ability to whitelist origins in AspNet.WebApi via web.config