Fix access-control-request-methods header name