add app configured headers
Merge pull request #29 from scollinson/master

Add support for app-wide configuration of Access-Control-Allow-Headers