Enhancement: Update cors-mw to include Access-Control-Allow-Headers