support Access-Control-Request-Headers
cleaned up
got rid of unnecessary .get call
Merge pull request #158 from derflocki/wp-allow-headers

support Access-Control-Request-Headers