Add CORS headers for  preflighted requests

CORS headers are now sent for GET and OPTIONS requests.