Add Vary: Authorization as well

Author: dmitrizagidulin

lib/create-app.js

@@ -121,7 +121,10 @@ function initHeaders (app) {
 
   app.use((req, res, next) => {
     res.set('X-Powered-By', 'solid-server')
-    res.set('Vary', 'Accept') // Cors lib adds Vary: Origin automatically
+
+    // Cors lib adds Vary: Origin automatically
+    res.set('Vary', 'Accept, Authorization')
+
     // Set default Allow methods
     res.set('Allow', 'OPTIONS, HEAD, GET, PATCH, POST, PUT, DELETE')
     next()