Can the gem config allowed_origins use wildcard origin url such as https://*.example.com to match against the request origins? If not is there any reason why we should not implement a such a feature?