Allow GET, POST, OPTIONS methods on CORS Endpoint