Try rack-cors gem
Add options route for preflight request
Fix route
Remove vestiges of past failures
Expose response headers
Adjust options route and response
Fix typo
Add after filter to set headers
Skip authenticity check in app controller
Set headers earlier
Try again
Add delete to allowed methods
Specify allowed request headers
Use different strategy to specify accepted request headers
Switch to default headers instead of rack-cors middleware
Restore rack-cors