Fix ExpressJS for recent versions of chrome

See http://stackoverflow.com/a/8658281/3773544 for further reference
"Access-Control-Allow-Headers" exists twice, once in the key and once in the value. I think you want to remove it from the value.