Bug 2292 : CORS access control fix

when browser sends cross-origin request, it first sends the OPTIONS method
     with a list of access control request headers, which has a list of custom headers and access control method
     such as GET. POST etc. You custom header "Authorization will not be present in request header, instead it
     will be present as a value inside Access-Control-Request-Headers.
     We should not do any authorization against such request.

Change-Id: I290f409a4685ed10685249b8514621ecb2159176
Signed-off-by: Harman Singh <harmasin@cisco.com>
(cherry picked from commit e8cd14ee78c627ab9cd02178e42f7459ba7cc1c9)