Added HEAD as default allowed method for Cors
Unused import
Refactored joining of allowed headers to be more efficient
* Possibility to add exposed headers
* Default allow headers
* Fix warnings, unused import, redundancies