Add OPTIONS to allowed methods