consider updating rack-cors to 0.4.0

debian already has 0.4.0 and this will help in packaging