add OPTIONS and GET methods to response headers