Update CORS validations to include all request methods