fix(model-server): allow Authorization header to be sent from foreign origins

(needed for in-browser clients)

Author: abstraktor

model-server/src/main/kotlin/org/modelix/model/server/Main.kt

@@ -140,6 +140,7 @@ object Main {
                 install(CORS) {
                     anyHost()
                     allowHeader(HttpHeaders.ContentType)
+                    allowHeader(HttpHeaders.Authorization)
                     allowMethod(HttpMethod.Options)
                     allowMethod(HttpMethod.Get)
                     allowMethod(HttpMethod.Put)