Change EnableCors attribute to be a RequestFilter and add AutoHandleOptionRequests