Allow authorization in cors headers
New version