Support for * in the origin list for partial matches

*From the README*

As a convenience method, you can use the `*` character as a wildcard. This means you can allow any origins:

```js
origins: ['*']
```

Or you can also allow selected subdomains of your application:

```js
origins: [
  'http://myapp.com',
  'http://*.myapp.com'
]
```

For added security, this middleware sets `Access-Control-Allow-Origin` to the origin that matched, not the configured wildcard.