Respect send_wildcard with default origins configuration

Currently, if `origins` is set via an app config (e.g. `app.config['CORS_ORIGINS']`) or if the default is used, the `send_wildcard` param is not respected.

If the decorator is called without `origins`, the `send_wildcard` param should still be respected.