Merge branch 'fix-cors' into 'develop'

Added more header to allow proper cors

See merge request dojo/samourai-dojo!141

lib/http-server/http-server.js

@@ -163,6 +163,8 @@ class HttpServer {
    */
   static setCrossOrigin(req, res, next) {
     res.set('Access-Control-Allow-Origin', '*')
+    res.set('Access-Control-Allow-Methods', 'GET,HEAD,POST,DELETE')
+    res.set('Access-Control-Allow-Headers', 'Content-Type,Authorization,Accept')
     next()
   }