Added Authorization and Accept to CORS headers