Added allow origin as option, with default as none