Refined CORS header to only https://gratipay.com