CROSS_SITE_PREVENTION switch
use "true"
fix ALLOWED_ORIGINS regexp
Merge branch 'turn-off-origin'