title: How do you disallow same-origin access but allow strict cross-origin?
body: <p>Say I have a server abc:8080
  and a website web.org that make requests to abc:8080..</p>
  <p>I only want abc:8080 to be accessible through web.org..
  Users are disallowed from navigating to abc:8080 without being on the allowed origin 'web.org'.
  Is this possible?</p>
  <p>django-cors-headers specific answer would be awesome!</p>