fix: origin may be undefined

server.js

@@ -21,7 +21,7 @@ container.load(loggerBackendModule);
 
 //CORS middleware
 const allowCrossDomain = function (req, res, next) {
-    if (req.headers.origin.endsWith('.deadlock.io')) {
+    if (req.headers.origin && req.headers.origin.endsWith('.deadlock.io')) {
         res.setHeader('Access-Control-Allow-Origin', req.headers.origin);
         res.setHeader('Access-Control-Allow-Headers', 'X-Requested-With,Content-Type');
         res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS, PUT, DELETE');