Options default responses moved into base RESTController.
This makes them overrideable per Controller, but sets up a sane default.
Options routes must still be created for every Controller.