Fix ExpressJS for recent versions of chrome

See http://stackoverflow.com/a/8658281/3773544 for further reference
Looks good, thanks! Just curious, does this still work without "Origin" in the value? I can't imagine browsers rejecting requests if Origin isn't present (of course, it doesn't hurt to have it there either).