Adds options to the allowed methods for CORS requests.