Update CORS config to allow PUT requests