Added CORS headers in options