Add conditional check when cors.allowOrigin is *

Set to null to revert to default functionality and display E_USER_NOTICE