Tests for handling OPTIONS method and CORS headers.