Fix NPE when no origin header is provided

Tested, this time…