Add Content-Type to CORS Access-Control-Allow-Headers