- change urls back to proxy.  The origin allow header got disabled again,
  and besides, they say that some browsers don't support that header in the
  first place, and just deny the request.