Using a CORS Mixin instead of a Middleware

      It respects the resource allowed_methods as opposed to a
      Middleware Global setting