Add Access-Control-Allow-Headers to —ctor to allow for AJAX requests