Fix ALLOWED_ORIGINS initialization