The "Origin" request header is included