Added verbs to CORS headers.