added contracts and polished forbidden for OPTIONS *