Included header Access-Control-Allow-Methods

Included header  "Access-Control-Allow-Methods" to support CORS