Add X-User-Path and -Token to allowed CORS headers
Merge pull request #5 from policycompass/cors-add-user-headers

Add X-User-Path and -Token to allowed CORS headers