Added a configuration key to allow custom headers in CORS use case

Hi,
First thank you for this awesome mock server. Here is a PR to add support for custom allowed headers when doing CORS. 
I added a configuration key in config.json which is called "allowedHeaders" and which is by default set to ["Content-Type"].
Please tell me if you are seeing room for improvement in my implementation. 

Thanks again for your initial work !