title: Restify Cross Origin Basic Auth with AJAX
body: <p>HTTP Basic Auth is working great when calling from my REST client. However, the app that is consuming the API is built w/ Backbone. </p>
  
  <p>We tried overriding Backbone sync to pass along the Authorization header but it is failing on an options call -- from what I understand a <code>preflight</code> call to see if cross origin calls are allowed. And it's important to note that this is not unique to Backbone, this happens with any cross-origin AJAX call that has modified headers.</p>
  
  <p><strong>Response Screenshot:</strong> <a href="http://cl.ly/image/0j2v240A0p2f" rel="nofollow">http://cl.ly/image/0j2v240A0p2f</a></p>
  
  <p>I've also tried modifying the fullResponse (full_response.js) plugin bundled w/ Restify (by adding <code>Authorization</code> to the <code>ALLOW_HEADERS</code> array. </p>
  
  <pre><code>var ALLOW_HEADERS = [
      'Accept',
      'Accept-Version',
      'Content-Length',
      'Content-MD5',
      'Content-Type',
      'Date',
      'X-Api-Version',
      'X-Response-Time',
      'Authorization'
  ].join(', ');
  </code></pre>
  
  <p>This is one of the few things left before being able to push to production. Any thoughts?</p>