setting cors headers for OPTION method only

if you apply this change, consider updating other sample filters as well