dynamically allow all CORS requests by echoing back requested headers
Merge branch 'allow-all-cors-headers'