Returns good headers

Before:
```
Access-Control-Allow-Headers: ['Origin', 'X-Requested-With', 'Content-Type', 'Accept']
```

After:
```
Access-Control-Allow-Headers: ORIGIN, X-REQUESTED-WITH, CONTENT-TYPE, ACCEPT
```