Add an OPTIONS response that allows for browsers to check for the Access-Control-Allow-Origin.