[aerogear-dev] Add Access-Control-Max-Age to CORS preflight headers