@Test
public void CORSHeaders() throws Exception {

    given().header("Origin", "fake.host.to.trigger.cors").when().get("/preparations").then().header(
            "Access-Control-Allow-Origin", "fake.host.to.trigger.cors");
}