Stop adding unknown origins to allow-list

[andyhd]

• We want to manually add origins to the allow-list when onboarding a service, to keep control over who is using Single Consent API
• Automatic registration allows unknown users to add their domain to the allow-list which may pose a security risk - better to remove the possibility

[andyhd]

Thanks for merging your PR which fixed this one @guilhem-fry