OttoYiu/django-cors-headers — pull request #2 by darrinm (2013-01-22 06:01:37+00:00)
Title: repair mismatched setting names (ALLOWED -> ALLOW)

Looks like these names were overlooked.