CORS OPTIONS support for resources and items.
CORS Access-Control-Allow-Headers header.

Sent with CORS OPTIONS request. Added X_HEADERS configuration option.
Minor (very) PEP8 fixes
CORS OPTIONS; Access-Control-Allow-Headers (Garrin Kimmel)
Garrin Kimmel
Merge branch 'garrinkimmell-cors-options' into develop