• When CORS is enabled, permit requests from the same origin as the

    request host, as the request is not a cross origin.
    
    Relates elastic#18256
    Ali Beyad
    Ali Beyad committed May 11, 2016