Responding to OPTIONS with Access-Control-Allow-Methods
Responding to OPTIONS with Access-Control-Allow-Origin