Log warning when a CORS actual request performs a redirect

[cyu]

It appears redirects on CORS actual requests are not allowed according to the CORS spec: http://www.w3.org/TR/cors/#cross-origin-request-with-preflight-0 (step 3). To avoid confusion, log a warning when this is happening and debug: true.

This issue was originally brought up in issue #33