Fixes CORS POST

No milestone No one is assigned
Patches already emailed to ceph-devel list at vger.

Patch 3 is the important one: looking up the correct secret key for validation.

Resending against next as requested in https://github.com/ceph/ceph/pull/1113#issuecomment-32701507