New project

Bare hostname like amazon.com. Subdomains of this host are auto-allowed. API requests must carry an Origin matching this hostname.