Allow CORS for Accept and Authorization headers
Bumped version to 1.0.1
Merge branch 'accept-authentication-header'