Add OPTIONS response since express no longer does it for us