Add CORS header for OPTIONS requests