comments updated to include the exception information
Fix for "Request header field Authorization is not allowed by Access-Control-Allow-Header". Fix #157