KETTLE-25: Added PUT and POST to the allowed methods to be used in CORS ...

...and updated the test for the headers accordingly