Tweak Access-Control-Allow-Origin stuff per comments on r54127.
Use a wildcard syntax rather than string/regex options