Fixes CORS POST

Patches already emailed to ceph-devel list at vger.

Patch #3 is the important one: looking up the correct secret key for validation.