more tests and / OPTIONS handler
add Content-Type to Options CORS request