Fix warnings for the cors preflight view

The default cors preflight view always returns an empty string which is serialised to a quoted empty string. The regular expression at https://github.com/mozilla-services/cornice/blob/master/cornice/validators.py#L7 does not evaluate true for this case. Returning an empty object eliminates the xsrf warnings generated by the default filter.