Allow all methods in CORS and echo method in response