Merge pull request #827 from crickeys/patch-4

Fixes when browser doesn't send origin header, defaults to empty string ...