Allowing OPTIONS requests through and setting up a dedicated controller to deal with them