allow all http methods through CORS

these are, CONNECT, DELETE, GET, HEAD, OPTIONS, POST, PUT, TRACE.

Change-Id: I54e6d4bad54f0d0534f2b431b754467ee57da830