- allowed origins easily configurable
- get-started config might act differently than production config
Java does not allow to set Origin headers by default. To allow it, the system property sun.net.http.allowRestrictedHeaders must be set to true. We can not do this via System.setProperty because sun.net.www.protocol.http.HttpURLConnection reads this only once. So we need to set it via Maven.