Added allow origin header to response if an origin was provided