add changing verbs to CORS