diff --git a/app/app.go b/app/app.go
index f6f1c4d..278d9ff 100644
--- a/app/app.go
+++ b/app/app.go
@@ -93,7 +93,18 @@ func NewApp(cfg *Config) (*App, error) {
 	r.PathPrefix("/static/").Handler(fsHandler).Methods("GET")
 
 	cors := handlers.CORS(
-		handlers.AllowedHeaders([]string{"content-type"}),
+		handlers.AllowedHeaders([]string{
+			"X-Requested-With",
+			"Content-Type",
+			"Authorization",
+		}),
+		handlers.AllowedMethods([]string{
+			"GET",
+			"POST",
+			"PUT",
+			"HEAD",
+			"OPTIONS",
+		}),
 		handlers.AllowedOrigins([]string{"*"}),
 		handlers.AllowCredentials(),
 	)