Fix multiple origin config logic

Accidentally removed logic that supports multiple configurations
with the same origin
Fix tests
Renamed debug header X-Rack-CORS