add options verb to the routes.rb - having a problem with the before_filter :authenticate on the OPTIONS call, browser's not passing Authorization header