Fix NPE when no origin header is provided

Tested, this time…
Merge pull request #6 from brutasse/feature/cors

Fix NPE when no origin header is provided