add other headers for CORS fixes #186
Merge branch 'dev' of https://github.com/EventStore/EventStore into dev