#89: Add Authorization to CORS headers