CORS now responds to OPTIONS request method
added comment