http://stackoverflow.com/questions/10636611/how-does-access-control-allow-origin-header-work
http://blog.rogeriopvl.com/archives/nginx-and-the-http-options-method/