Update Whitelisting for CORs

Update whitelisting to send back the correct params for OPTIONS requests