added allowed methods to search route
separated logic for GET and OPTIONS request in search route
g object never has attr cors in after_request method, always add CORS headers
removed request methods to test this
added back request methods to search route
added back request methods to search route
testing another solution