allow OPTIONS, req.headers.origin || *
remove webkit-agent (thought i already did?)
strange fix to CORS issue - move CORS middleware to top, respond with
200 if OPTIONS request
Merge branch 'origin-develop'