fix syntax
rename origin to allow_origin
rename origin_whitelist to allow_origin_whitelist
browser compat