Finish 1.2.0
Fix #2 Access to oauth methods fails
Finish 1.2.2
Add Access-Control-Expose-Headers header
Add CHANGELOG entry for #3
Finish #3 Whitelist rate-limiting headers in CORS
Update version number to 1.2.3
Finish 1.2.3