removed extraneous headers caused by copying the request; these cause problems with Access-Control-Allow-Headers