ignoring protocol for cors check

Author: Bryan Kendall

lib/middlewares/cors.js

@@ -1,13 +1,16 @@
 'use strict';
 var cors = require('cors');
 var envIs = require('101/env-is');
+var url = require('url');
 
 module.exports = cors({
   methods: 'GET,PUT,POST,PATCH,DELETE,DEL',
   origin: function (origin, callback) {
+    var originParsed = url.parse(origin);
+    var originMatchesDomain = (originParsed.host === process.env.DOMAIN);
     var allow = envIs('development', 'test', 'io', 'local', 'staging') ?
       true :
-      (origin === 'http://'+process.env.DOMAIN);
+      (originMatchesDomain);
     callback(null, allow);
   },
   credentials: true