Improved handling of request headers.
An Origin header provided overrides default header.
Default Origin header now is scheme://domain[:port] , not full url
better variable name url -> origin