Making CORS work

Adding handling of browser "OPTIONS" web call (which is a call made by browsers prior to issuing a POST or DELETE in CORS cases)