Added support for setting allowed origins

Added both BC (you can use set to set the origins) as well as logic for putting in the callback to engine.io for request verification.

See https://github.com/LearnBoost/engine.io/pull/243