tornado already supports xheaders, just needed to turn it on.