master: Fixed Access-Control-Allow-Headers