Add Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS to HTTP Header