Provide means to set Access-Control-Allow-Headers header

This was required in order to allow ember.js to talk to
my Sinatra API remotely (cross origin)