Added support for specifying custom allowed CORS headers. Closes #8.