respond 200 to OPTIONS requests in REST API and check if req.body.id equals req.params.id in PUT requests