Fix the previous commit

Remove 'access-origin: *' entirely and automatically include the passed
mobile-server to the list of whitelisted domains automatically.