added: allowed-origin configuration item

 - Now an origin allowed to access the service can be specified