v2.10.3

Fixed

• Fix improper CORS where request from an origin not listed in allowed_origins will be responded
  with null for the Access-Control-Allow-Origin header. The fix returns the first of our
  allowed origins if the requesting origin is not a supported origin. Reported by Barak Tawily.
  (bug fix)