Allow the origin check to be disabled by not specifying a whitelist.

Allow free-for-all access to the socket server so API clients can use it.

:eyeglasses: @rram @deimos