fix defaulting of AllowCORS origins setting
travis: build only master & release branches