Cors headers module, helper for OPTIONS