added options method for CORS pre-flight check