add X_HEADERS options in Eve (needed by Chrome for CORS)