handle OPTIONS request method and headers