Added Access-Control-Allow-Headers to allow cors requests with those headers
Merge pull request #886 from christriddle/master

Added Access-Control-Allow-Headers for CORS requests