added headers to cors allowed headers
Merge branch 'dev'