Enable Origin header check in forgery protection
Enable Origin header check in forgery protection

This is the default in Rails 5 applications.

This option is not enabled by default in existing applications because
it would break applications running on several domains and doing POST
requests between them or running a reverse proxy that rewrites the Host
header. Since those aren't our cases, it's safe to enable it.

consul/consul,consul/consul,consul/consul,consul/consul,consul/consul