Update CorsBehavior.php

Added more parameters to fulfill the CORS requirements

See: http://www.html5rocks.com/en/tutorials/cors/

main.php - update like this:

'behaviors'=>array(
  'cors'=>array(
  'class'=>'ext.cors.CorsBehavior',
  'route'=>array(
    'api/v/1', // etc
  ),
  'allowOrigin'=>'*', // for all - or be more restrictive
  'maxAge'=> 1728000, // 30 days, in seconds, defaults to 0
  // 'allowCredentials'=>true,	// uncomment if needed, defaults to false
  // 'exposeHeaders'=>	'X-Custom-Header',
  // 'allowMethods'=>	'GET, POST, PUT, DELETE',// comma-separated-list, defaults to 'GET, POST, PUT, DELETE' 
  'allowRequestHeaders'=>'Authorization, password, username', // defaults to 'Authorization'
),
...