[cors] Add Origin header to requests