Fixing a problem if trying to publish using Authentication in a web browser

CORS support for OPTIONS request wasn't returning 'Authorization' in the value list for the `Access-Control-Allow-Headers` header.

Signed-off-by: Jim Klo <jim.klo@sri.com>
Merge pull request #249 from jimklo/fix-cors

Fix CORS support when publishing using Authentication header