bin xhr sync test: add OPTIONS verb so that CORS works in Chrome. also use OOP

Chrome does a preflight CORS request, which Firefox doesn't. This requires implementation of the OPTIONS verb for the test to work in Chrome