adding Authorization to Access-Control-Allow-Headers
spacing fix
Merge pull request #7 from neilberget/allowed-headers

Allowed headers