1.2.0
Fixed an issue where the module was checking for an origin header for GET requests.
When the module is running in the web origin's domain, the origin header is only sent for data changing commands.
Therefore when oauth_proxy_cors_enabled =off
is configured, the origin header is only validated for data changing commands.