doOptions CORS addition