Fixes #21, Access-Control-Allow-Origin in cors.headers being ignored