Adds CORS header for allowing all HTTP methods