Some typo fixes.
Enchanced policy wr to origin handling. The Origin: can now be checked on the server side, too.