Don't redirect on job creation (it screws with CORS and is annoying
Echo access control request headers in access control allow headers - this is needed for more unusual CORS requests