fix(handlers): add Access-Control-Allow-Methods to cors

This is needed to have CORs work properly. Fixes #252
Merge pull request #253 from philips/add-Access-Control-Allow-Methods

fix(handlers): add Access-Control-Allow-Methods to cors