Changed dropAtmosphereHeaders property to dropHeaders: now custom header...

...s will also be dropped.

Used the occasion to remove the HOTFIX for Firefox: the bug has been closed, and this is now causing errors in Chrome when doing CORS requests with custom header (and dropHeaders=true): ``Refused to get unsafe header "xxx"``