Added "Authorization" in http response header
Fixed issue when it should return right after response with OPTIONS