Rename routes
Options requests return 201
Add Access-Control-Allow-Credentials header