CORS file headers are absent

[michaeliwaikato]

The CORS header configuration is absent and prevents files accessed using CORS. A simple fix for this is to add the following to the api_site settings.py file:

CORS_ALLOW_HEADERS = [ 'accept', 'accept-encoding', 'authorization', 'content-type', 'content-disposition', 'dnt', 'origin', 'user-agent', 'x-csrftoken', 'x-requested-with', ]

The headers specified are all of the defaults found here and the addition of the "content-disposition" header item is what makes the file access work with CORS.

[michaeliwaikato]

This was tested working for commit #3e3ee37 but seems to break for the latest commit #93dcfe6. I am not sure where the break occurs.