Avoid modifying self.cors_allowed_methods inside @action