Origin == "null" is a valid CORS request

Per spec here: http://www.w3.org/TR/cors/#resource-sharing-check

Add more CORS related tests.