Match S3 websites for CF invalidation correctly

Before this patch the first distribution with a custom origin that had a prefix matching the bucket would be chosen.