Cors headers in unauthorized response

[patrickcorrigan]

Hello, I'm using your auth framwork and am very happy with it. I cannot seem to figure out how to get the unauthorized 401 messages to include cors headers. What do you recommend?

[patrickcorrigan]

Looks like it's an api gateway limitation http://forum.serverless.com/t/how-to-enable-cors-for-custom-authorizers-aws-api-gateways/1660