Adding parentheses to clarify code.
Adding missing Origin argument to verify_cors method calls.

Also removed 'Access-Control-Request-Method' from non-preflight request
(simple CORS requests).