Added CORS preflight support for realms/<realm>/tokens/refresh