CORS preflight

$ curl -H "Access-Control-Request-Method: GET" -H "Access-Control-Request-Headers: X-Requested-With" -X OPTIONS -H "Origin: https://theboomcase.goodsie.com" --verbose   https://d1bn1ndebsjcoa.cloudfront.net/8a6779f/styles/css/combined-store-goodsie.css
* Adding handle: conn: 0x7fae2a004000
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x7fae2a004000) send_pipe: 1, recv_pipe: 0
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0* About to connect() to d1bn1ndebsjcoa.cloudfront.net port 443 (#0)
*   Trying 54.239.152.56...
* Connected to d1bn1ndebsjcoa.cloudfront.net (54.239.152.56) port 443 (#0)
* TLS 1.2 connection using TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
* Server certificate: *.cloudfront.net
* Server certificate: VeriSign Class 3 Secure Server CA - G3
* Server certificate: VeriSign Class 3 Public Primary Certification Authority - G5
* Server certificate: Class 3 Public Primary Certification Authority
> OPTIONS /8a6779f/styles/css/combined-store-goodsie.css HTTP/1.1
> User-Agent: curl/7.30.0
> Host: d1bn1ndebsjcoa.cloudfront.net
> Accept: */*
> Access-Control-Request-Method: GET
> Access-Control-Request-Headers: X-Requested-With
> Origin: https://theboomcase.goodsie.com
> 
< HTTP/1.1 403 Forbidden
* Server CloudFront is not blacklisted
< Server: CloudFront
< Date: Fri, 29 Aug 2014 13:46:36 GMT
< Content-Type: text/html
< Content-Length: 472
< Connection: keep-alive
< X-Cache: Error from cloudfront
< Via: 1.1 4a0d02e932a4fe855468bd78d158dac7.cloudfront.net (CloudFront)
< X-Amz-Cf-Id: AxBdm2Wb-mHynu4ecpjef0Z-TyBRaeEjLR-Jh9wlU2328gXIbMaNJA==
< 
{ [data not shown]
100   472  100   472    0     0   2238      0 --:--:-- --:--:-- --:--:--  2247
* Connection #0 to host d1bn1ndebsjcoa.cloudfront.net left intact