Allow OPTIONS actual requests.

I've added the ability to make the actual OPTIONS request, but there is a failing test, ```preflight requests should fail if Access-Control-Request-Method does not exist```. I cannot see how to make that pass. Please, @cyu, could you comment about the reason for this test?