1.3.0 Makes the exposed JSON:API resource list configurable, and fixes preflighted cross-origin requests being refused by default. Issue #3309969: Add ability to configure/extend exposed Druxt JSON:API resources Issue #3541756: CORS: Set allowedHeaders to '*' by default