Updated CORS support
- added headers option to accept custom headers
- added methods option to allow xhr requests to any verb