Fixed CORS for POST requests, as per patch from Yves Raimond

c.f. https://groups.google.com/d/msg/4store-support/hPeN-dVhMFE/S81dfu9CL9oJ