return jsonResponse on delete to set cors headers