Add 'Authorization' to 'Access-Control-Allow-Headers' of responses to OPTIONS queries, so that web dashboards can work with RO authentication