Don't throw exceptions for localhost in CORSHelper.

This is necessary because the origin that chrome uses does not pass the validation below (so an exception is thrown) on my local set up that uses port forwarding.