Adds 'Allow' header for OPTIONS request