Fix/cors

Added OPTIONS to array of allowable requests