Make sure Rack Cors is included before Warden

Closes #240