title: Symfony 3 Nelmio cors set allow origin properly
body: <p>I want to give limit access only allow some address to access my restful API, I using symfony and nelmio cors bundle.</p>
  
  <p>this is my config from documetation :</p>
  
  <pre><code>nelmio_cors:
      defaults:
          allow_credentials: false
          allow_origin: []
          allow_headers: []
          allow_methods: []
          expose_headers: []
          max_age: 0
          hosts: []
          origin_regex: false
          forced_allow_origin_value: ~
      paths:
          '^/api':
              allow_origin: ['192.0.74.122']
              allow_headers: ['X-Custom-Auth']
              allow_methods: ['POST', 'PUT', 'DELETE']
              max_age: 3600
          '^/':
              origin_regex: true
              allow_origin: ['^http://localhost:[0-9]+']
              allow_headers: ['X-Custom-Auth']
              allow_methods: ['POST', 'PUT', 'GET', 'DELETE']
              max_age: 3600
              hosts: ['^api\.']
  </code></pre>
  
  <p>I want to set <code>192.0.74.122</code> only allowed to access the <code>^/api</code> and <code>^/api/*</code>, but when I test in browser, postman and jquery ajax call, it can be from localhost or <code>127.0.0.1</code>.</p>
  
  <p>please help me how to block from other address beside the allowed addresses?</p>