Needed to add @OPTIONS to Plan resource - not sure why as filter should
be handling CORS.