Fixed #31 After feedback from @MichaelGooden, the response to an OPTIONS request now includes BOTH Allow and Access-Control-Allow-Methods header lines.