Allow custom headers

Required for Access-Control-Allow-Origin.