Update ApiController.php

fix(api-controller): add X-User-Agent to Access-Control-Allow-Headers header in optionsAction