Allowed content-type to be specified in cross origin requests