remove 'allowed origin' setting