Fix formatting with headers.  Note :K3 already does ucfirst before sending them,
so this is purely a matter of code formatting.
Remove an "@todo: consider..." comment - I considered it, and now think "no" :-)
Add OPTIONS responses for CORS preflight requests.  This required moving
around REST auth a bit since OPTIONS doesn't need auth.
@todo: add the admin screen to set the parameters
Merge pull request #409 from shadlaws/fixes_20130615

Fixes 20130615