Add PUT and DELETE to allowed CORS methods for local dev