configure CORS to allow 'with-credentials' requests. as a result have to set 'allow-control-access-origin' to not '*' .. it's k
Merge branch 'master' of github.com:LiminalSoftware/SR-Rails-API

* 'master' of github.com:LiminalSoftware/SR-Rails-API:
  Add a 'broken' route
  Ignore db/logfile
  WIP... Controller testing...
  In the middle of challenges...
  Update rails gem to 3.2.11. Change Allow-Control-Access-Headers to include X-Requested-With and Content-Type.