feat: Explicitly handle * in allowed_origins as "allow all" (#17)

feat: Explicitly handle * in allowed_origins as "allow all" (#17) #19