Reverted "*" check as conditional when building allowed hosts in CORS handling. Issue introduced in 1.4 - 1.5 time range.