#255 fixed issue when querying cors-enabled endpoints with custom request headers