Adds Content-Type as an allowed header for CORS