Allow any request origin for IIIF endpoints

Closes #1627 (closed)

I followed the last section of the documentation which is straightforward.

requested review from @babadie

assigned to @vrigal

Works with binary build and using Origin header

merged