Added Authorization to list of allowed header (CORS)