Resolves #144, support for Access-Control-Request-Headers with CORS