Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
Allow X-Bearer-For-All-Users, X-Bearer-Lifetime headers. Add CORS to /auth/bearer route. Signed-off-by: Denis Kirillov <denis@nspcc.ru>