diff --git a/lib/expressapp.js b/lib/expressapp.js
index 726b1e6..337a58f 100644
--- a/lib/expressapp.js
+++ b/lib/expressapp.js
@@ -29,7 +29,7 @@ ExpressApp.start = function(opts) {
   app.use(function(req, res, next) {
     res.setHeader('Access-Control-Allow-Origin', '*');
     res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS, PUT, DELETE');
-    res.setHeader('Access-Control-Allow-Headers', 'X-Requested-With,Content-Type,Authorization');
+    res.setHeader('Access-Control-Allow-Headers', 'x-signature,x-identity,X-Requested-With,Content-Type,Authorization');
     next();
   });
   var allowCORS = function(req, res, next) {