ALLOW_ORIGIN Multiple Domains

I was having a problem when setting multiple origins in the ALLOW_ORIGIN env variable (http://stackoverflow.com/questions/1653308/access-control-allow-origin-multiple-origin-domains), so I did a new setDefaultHeaders() implementation do deal with it.