Make origins check for CORS