Added Access-Control-Allow-Methods header so that DELETE is possible.