Only block requests from non-whitelisted origins if they start with HTTP
Fixes issue where Postman no longer works with Sails, due to it sending a "chrome://" origin header.
Test CORS with routes with no/non-http origin headers
Updated sails-util dependency
Use updated isSameOrigin to simplify code
Added tests for different ports and non-http origins to CORS/CSRF test suite
merged from sails team