Sending request headers for Simple Cross-Site Access Request

The Access Control spec should state that the request headers, in  
addition to the headers normally included in the request ("User- 
Agent") should be sent for Simple Cross-Site Access Request as well as  
Cross-Site Access Request with Preflight.  This, of course, would only  
include the white-listed headers.

-Sam Weinig