Fixed CORS issue with preflight in resource service