PATCH and OPTION should be allowed in CORS; method list should be configurable
Merge branch 'cors-method-enhancement'