Added a configuration key to allow custom headers in CORS use case
Fix typo, add tests for allowed-headers feature.  Also update readme and npm version.