OPHASPA-339: Added some javadoc and comments
OPHASPA-339: Does not set Allow Origin

When missing configured parameter, allowedDomains, or domains do not
match in production mode.