Add preflight DELETE handler & return entity in POST response body

Changes:

- Add preflight DELETE handler. The existing method does not catch the preflight DELETE request since it does not have a "token" path param.
- Return entity in POST response body. When the response body is empty then the Ajax request fails (the error function is called).
- The response headers values are filled according the request and are not hardcoded.