Got REST CORS working with a hack.
I had to overwrite the parent (Ext.data.Connection) doRequest method to
add useDefaultXhrHeader=false option to the request.