Removed access control origin header from apiv1 handlers (now it is added by nginx)