Add support to match incoming request origin for CORS

I had a requirement to develop a RESTful API that were accessible to an unknown set of domains where an active session can be established (and thus require cookies). My requirements have thus changed but I thought this may still be useful considering it had worked on an older version of hapi at one point.

I added a single option called 'matchRequestOrigin' so it's only enabled if someone explicitly wants it.