Add tests, fix allowed_origins
Response of None on failure