Allow cross origin requests.

Correctly respond to OPTIONS requests to allow cross origin
XMLHttpRequests. This should not affect security as authentication still
works as before.
Handle "multipart/form-data" content types.
Merge pull request #5 from krischer/master

Cross origin requests and multipart/form-data content