Allow CORS OPTIONS requests on dataset list and instance views