security: improve readability of CORS handling

Created by: slimsag

The code under this if conditional would previously run if any corsOrigin was configured in the site configuration (corsOrigin != ""), and so effectively it always runs. The conditional is not needed and makes the code obtuse.

Signed-off-by: Stephen Gutekanst stephen@sourcegraph.com