some comments

dream/platform/crossdomain.py

@@ -36,6 +36,7 @@ def crossdomain(origin=None, methods=None, headers=None,
             h['Access-Control-Allow-Origin'] = origin
             h['Access-Control-Allow-Methods'] = get_methods()
             h['Access-Control-Max-Age'] = str(max_age)
+            # XXX It should not be necessary to hardcode allow-headers
             h['Access-Control-Allow-Headers'] = 'Content-Type'
             if headers is not None:
                 h['Access-Control-Allow-Headers'] = headers