Add CORS headers to Options.