[bug 1087327] Fix for CORS Access-Control-Allow-Headers