'Send CORS headers for access token requests
* Allow all origins
* Only POST requests allowed to /api/v1/access_token
* No ambient credentials
* Authorization header required to identify the client
* Expose common reddit headers'

def OPTIONS_access_token(self):

    if ('Origin' in request.headers):
        response.headers['Access-Control-Allow-Origin'] = '*'
        response.headers['Access-Control-Allow-Methods'] = 'POST'
        response.headers['Access-Control-Allow-Headers'] = 'Authorization,    '
        response.headers['Access-Control-Allow-Credentials'] = 'false'
        response.headers['Access-Control-Expose-Headers'] = self.COMMON_REDDIT_HEADERS
