Adding CORS header concerns

Hi there,

Thanks for this library. I added the handling of header whitelisting to it. 

And at the same time tried to make some parts of the code it a little bit more readable. 
I'm a ruby guy who's only started doing clojure recently so even though I tried to be idiomatic I may haven't been.

Cheers