Added put and patch to CORS allowed methods.