Header: allow any request origin

Change-Id: I0e69ed92beeab573d7fdb24597165c03189f4a08