Fixed a bug where the test environment isn't always set up correctly
End requests that contain an 'Origin' header to disallow CORS