Prevent TokenMismatchException for HTTP OPTIONS requests

`OPTIONS` HTTP requests should be treated in the same way than `GET` requests by the `VerifyCsrfToken` middleware. Otherwise, an exception is thrown, thus preventing any `OPTIONS` route to work.
Merge pull request #3118 from miclf/patch-1

Prevent TokenMismatchException for HTTP OPTIONS requests