Specify allowed request headers
Use different strategy to specify accepted request headers
Switch to default headers instead of rack-cors middleware
Restore rack-cors