Added HEAD as default allowed method for Cors
Unused import
Refactored joining of allowed headers to be more efficient
* Possibility to add exposed headers
* Default allow headers
* Fix warnings, unused import, redundancies
Merge pull request #391 from jeroenr/master

CORS improvements and clean up