Enable CORS headers are not working

[arunk]

Try connecting to the local server with curl

$ curl -i http://localhost:8080/annotations/

The Access-Control-Allow-Origin headers do not show up.

$ curl -i -X OPTIONS http://localhost:8080/annotations/

Access-Control-Allow-Origin headers do show up. Only seems to show up for OPTIONS and not any of the other methods - GET, POST etc.