[mholt]

We mitigate both DNS rebinding and cross-origin in the admin endpoint by verifying Host and Origin headers -- by default.