Add DELETE to api cors

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>