add CORS Header for OPTIONS request
make sure we expect the correct number of tests

this caused the test to fail