Fix typo in ApiTokens view
Handle OPTIONS requests to /api/*

It's a bit of a hack, but that shouldn't cause problems.
Expose POST /api/v1/document-sets/:id/searches