Added handling of CORS preflight requests.

No matter what the resource is, we currently return a status code of 200 and an
empty JSON document "{}".