Single Origin

Restrict loading resources from the origin domain, and chosen other domains