allow origins to be specified as strings