Enable PUT and DELETE in CORS