handle OPTIONS requests to allow PUT requests from browser