add cors to delete and put methods