Implement OPTIONS response for CORS