Added matchRequestOrigin option for CORS

Added the matchRequestOrigin option for CORS to allow any origin to be
put into the header.