Disable Rack::Protection::HttpOrigin middleware.

https://github.com/rkh/rack-protection/pull/37